From 3e5344a46c0ca5948c31124af13a4cc5205e6fbd Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Wed, 20 Aug 2025 07:03:02 +0200
Subject: [PATCH] Optimized Collabora CSP for Nextcloud

---
 roles/web-app-nextcloud/config/main.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/web-app-nextcloud/config/main.yml b/roles/web-app-nextcloud/config/main.yml
index 29596201..b345fe21 100644
--- a/roles/web-app-nextcloud/config/main.yml
+++ b/roles/web-app-nextcloud/config/main.yml
@@ -9,8 +9,9 @@ server:
     whitelist:
       font-src:
         - "data:"
-      frame-src:
+      connect-src:
         - "{{ WEB_PROTOCOL }}://collabora.{{ PRIMARY_DOMAIN }}"
+      frame-src:
         - "{{ WEB_PROTOCOL }}://collabora.{{ PRIMARY_DOMAIN }}"
         - "wss://collabora.{{ PRIMARY_DOMAIN }}"
   domains: